
Claims 

1 1 . A dat&S^S|e'ment system, comprising: 

2 an access control system for limiting access to the data management 

3 system to authorized entities; 

4 a data confidentiality system for identifying and concealing confidential 

5 details in received data; 

6 a data storage system for storing the received data; and 

7 a data update system for examining stored data to identify and expose non- 

8 confidential details. 



1 2. The system of claim 1 , further comprising: 

2 a data decryption system for decrypting received data; 

3 a data verification system for verifying an accuracy of received data; 

4 a program approval system for approving systems for analyzing the stored 

5 data; and 

6 a key security system for protecting encryption keys. 



1 3. The system of claim 1, wherein stored data is analyzed with a data analysis 

2 system. 



1 4. The system of claim 3, wherein the data analysis system is permitted to analyze 

2 the stored data based upon approval by full rights members of the data 

3 management system. 
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1 5. The system of claim 1 , wherein data management system is a tamper resistant, * 

2 tamper evident, tamper sensitive, tamper reactive, and programmable system. 

1 6. The system of claim 1, wherein the received data and the stored data are 

2 operational risk data. 

1 7. The system of claim 1, wherein the system mitigates operational risk. 

1 8. The system of claim 1, wherein data is received based upon a randomly 

2 generated time interval. 

1 9. The system of claim 1, wherein the confidential details cannot be accessed by 

2 any entity. 

1 10. The system of claim 1, wherein the confidential details can only be accessed 

2 by a plurality of entities acting in concert. 

1 11. The system of claim 1 , further comprising a customer relationship 

2 management tool for verifying a policy of an entity. 
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1 12. A data management system, comprising: 

2 an access control system for limiting access to the data management 

3 system to authorized entities; 

4 a data decryption system for receiving and decrypting received operational 

5 risk data; 

6 a data confidentiality system for identifying and concealing confidential 

7 details in the received data; 

8 a data storage system for storing received data after the confidential details 

9 have been concealed; 

10 a data update system for examining stored data to identify and expose non- 

1 1 confidential details; 

12 a program approval system for approving systems for analyzing the stored 

13 data; and 

14 a key security system for protecting encryption keys. 



1 13. The system of claim 12, wherein stored data is analyzed with a data analysis 

2 system. 

1 14. The system of claim 13, wherein the data analysis system is permitted to 

2 analyze the stored data by the program approval system based upon approval by 

3 full rights members of the data management system. 
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15. The system of claim 12, wherein a provider submits the operational risk data 
to the data management system, and wherein a requester accesses the stored data. 
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16. A method for managing data, comprising: 

receiving data in a secured manner from an authorized provider; 
identifying and concealing confidential details in the received data; 
storing the received data; and 

updating the stored data by identifying and exposing non-confidential 
details in the stored data. 

17. The method of claim 16, further comprising: 

decrypting the received data, prior to the identifying step, 
verifying an accuracy of the received data; 
approving a system for analyzing the stored data; and 
protecting encryption keys. 

18. The method of claim 16, further comprising analyzing the stored data with a 
data analysis system. 

19. The method of claim 18, further comprising approving the data analysis 
system based upon approval by full rights members. 
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1 20. A program product stored on a recordable medium for managing data, which 

2 when executed, comprises: 

3 an access control system for limiting access to the data management 

4 system to authorized entities; 

5 a data confidentiality system for identifying and concealing confidential 

6 details in received data; 

7 a data storage system for storing the received data; and 

8 a data update system for examining stored data to identify and expose non- 

9 confidential details. 

21 . The program product of claim 20, further comprising: 
a data decryption system for decrypting received data; 
a data verification system for verifying an accuracy of received data; 
a program approval system for approving systems for analyzing the stored 

data; and 

a key security system for protecting encryption keys. 

22. The program product of claim 20, further comprising a data analysis system 
for analyzing the stored data. 

23. The program product of claim 20, wherein the data analysis system is 
approved by full rights member. 
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1 24. The program product of claim 20, wherein the received data is operational risk 

2 data. 
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